SAFETY TEST SUPPORT SYSTEM, METHOD AND PROGRAM 



FIELD OF THE INVENTION 

The present invention relates to a safety test support system, a safety test 
support method and a safety test support program, which may be applied to the 
chemical test data management for recording, managing and accumulating, compi I ing 
or tabu I at i ng data on I i v i ng bod i es to wh i ch ma i n I y chem i ca I s have been g i ven. The 
data include body weight, food consumption, water consumption, biochemical test 
results, clinical symptom (or condition) observation results, pathological 
opinions (findings or observations) , uri nary output, ophtha Imologic test resu Its, 
hematological test results, etc. In particular, the system, method and program 
are suitable for chemical toxicity tests on animals. 

BACKGROUND OF THE INVENTION 

Before medicines, pharmaceuticals, agricultural chemicals, food additives 
and other chem i ca I s are marketed, they are c I i n i ca I I y tested for the safety of human 
bodies from carcinogenicity, toxicity, etc. Prior to the c I inical tests, the 
safety i s conf i rmed by means of non-c I i n i ca I tests on an i ma I s such as rats and m i ce. 

The non-c I inical tests include a single dose toxicity test, a repeated dose 
toxicity test, a reproduction/generation toxicity test, and a mutagenicity test. 
The single dose toxicity test proves the amounts in which a chemical is toxic if 
it is given once in these amounts to an animal. This test also proves what 
character i zes the tox i c i ty of the chem i ca I . The repeated dose tox i c i ty test proves 
the amounts in which a chemical is toxic if it is given two or more times in these 
amounts to an animal. This test also proves the amounts in which the chemical is 
nontoxic if it is given two or more times in these amounts to the animal. This 
test further proves what characterizes the toxicity of the chemical. The 
reproduction/generation toxicity test reveals the influences of a chemical on 
animal reproduction and generation. The mutagenicity test proves whether a 
chemical contains a substance that may cause a DNA lesion, and whether the chemical 
induces a mutation. The non-clinical tests also include a carcinogenicity test, 
a skin sensitization test, a skin photosensitization test and a dependence test. 

Each of the non-clinical tests includes the steps of actually giving the 
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animal the chemical, measuring the animal' s body weight, food consumption, water 
consumption, urinary output, etc., observing the animal' s cl inica I condition etc. , 
making histopatho logical observations etc. about the animal, and accumulating, 
compiling or tabulating and analyzing the obtained data. 

The non-cl inica I tests are conducted prior to the cl inica I tests, where the 
chemicals are actually given to human bodies. Since the chemicals eventually 
affect the human bodies, it is necessary to accurately understand and analyze the 
influences of the chemicals on I iving bodies. For this purpose, computer systems 
have been used to record, manage and ana I yze data (for example, Japanese Unexamined 
Patent Publication No. H07-1 10325). 

As stated above, medicines, pharmaceuticals and other chemicals influence 
human bod i es. Th i s is why the Hea I th, Labor and We I fare Mini stry and other Japanese 
government offices have set up strict standards of data management to prevent the 
forego i ng safety test data from be i ng a I tered d i shonest I y. The standards are known 
general ly as GLP (good laboratory practice). As a matter of course, the computer 
systems that manage the data need to satisfy the GLP standards. 

Needless to say, the design itself of the computer systems needs to meet 
the GLP standards. The appl i cat ion of the computer systems is very costly because 
the market for them is very niche, and because the application needs special 
know-how. When the computer systems are installed, it is necessary to confirm 
whether they work re I iably in compl iance with the GLP standards. After the system 
operation starts, the computer systems may be partial ly upgraded. In this case, 
i t i s necessary to conf i rm aga i n that the who I e systems work re I i ab I y in comp I i ance 
with the GLP standards, and to record the confirmation in writing. It is also 
necessary to guarantee that the systems themselves have not been tampered with. 

Each of the conventional computer systems is installed and operated with 
a I I functions integrated into it, and the whole system compl ies with the GLP and 
other standards. For this reason, even if a I imited part of the system functions 
i s upgraded, the who I e system needs to be tested aga i n for operat i on. For examp I e, 
in recent years, because virus programs and other system destruction programs have 
been spread i ng through secur i ty ho I es, operat i on system makers have frequent I y been 
providing security patches. For safe system operation, it is essential that the 
computer systems be updated as soon as the security patches are provided. 

As stated above, a I I functions are integrated into each of the conventional 
computer systems, and the whole system compl ies with the GLP and other standards. 
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Consequently, even if a security patch is applied only to the operation system of 
the computer system, the whole computer system is regarded as upgraded and 
accordingly needs to be tested for validation. Validation usual ly takes two to 
three people three or more months. When the computer system is installed, it 
undergoes a general acceptance inspection. Once the computer system starts 
operating, however, it is practically impossible to carry out the subsequent 
val idation required after the functions etc. of the system are updated. There is 
no real method of operation but continuing the system operation without updating 
and/or upgrading the computer system so that the validation can be avoided. 

In the circumstances, even if a security hole is detected during the system 
operation, a security patch cannot be app I ied, but the system operation is continued 
with anxiety for system safety. The software itself of the computer system can 
be used with general purpose hardware. However, if the hardware operated as a 
general purpose computer, validation would be required by the updated operation 
system and the other updated app I i cat ions that are not cooperative with the newly 
installed software. This substantially requires the provision of a special 
purpose computer, consequently making the installation cost very high. 

Various conventional validation systems are disclosed (for example, 
Japanese Unexamined Patent Publication No. H1 0-275093). Because the validation 
systems are mainly used to find and correct bugs in programs under development, 
they detect even si ight changes in the results of the val idation and output N. G. 
(error) signals. If the val idation systems are app I ied to the safety test support 
systems in operation, they may detect even si ight changes of fonts and display color 
as bugs and/or alterations and output N. G. signals. Because these si ight changes 
do not at a I I affect the operation of the support systems in compl iance with the 
GLP and other standards, a I I the output N. G. signals need to be visual ly rechecked. 
Accordingly, although the validation is an automatic inspection, it actually 
requires substantial manpower. 

The conventional computer system, into which a I I functions are integrated, 
has many functions that are seldom used. The addition of the useless functions 
raises the total cost of the system. When the computer system starts up, it 
authenticates the user. Thereafter, even if another person makes an entry into 
the computer system, the system is kept operating without further user 
authentication until it is terminated. Thus, it is essentially impossible to 
determine who has made the entry. This is a problem about the compl iance with the 
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GLP and other standards. 
SUMMARY OF THE INVENTION 

A first object of the present invention is to provide a safety test support 
system, a safety test support method and a safety test support program that comply 
reliably with the GLP and other standards by carrying out an inspection for 
automatically detecting a change that affects the system operation. 

A second object of the present invention is to provide a safety test support 
system, a safety test support method and a safety test support program that make 
it possible to greatly reduce the system installation and operation costs by 
packaging only selected functions in the system and excluding needless and less 
usable functions. 

A third object of the present invention is to provide a safety test support 
system, a safety test support method and a safety test support program that comply 
reliably with the GLP and other standards by authenticating the users at 
predetermined intervals while one or more application programs are active. 

According to a first aspect of the present invention, a safety test support 
system is provided for managing data concerning chemical safety tests on a I iving 
body to which a chemical has been given. The data include the condition of the 
body and/or the like. The support system comprises first program storage, an 
activating means, second program storage and an inspection conducting means. The 
first program storage stores appl i cat ion programs for the safety tests, which are 
functionally partitioned according to data items and/or operations. The 
activating means activates at least one program selected from the application 
programs. The second program storage stores check programs each for detecting a 
change or changes in one of the appl i cat ion programs during the system operation. 
The inspection conducting means detects changes in the application programs by 
sequentially executing the stored check programs in response to an inspection 
conducting signal. 

According to a second aspect of the present invention, a safety test support 
method is provided for managing data concerning chemical safety tests on a I iving 
body to which a chemical has been given. The data include the condition of the 
body and/or the like. The support method comprises the steps of: 

storing application programs for the safety tests, which are functional ly 
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partitioned according to data items and/or operations, in first program storage: 
activating, by means of an activating means, at least one program selected 

from the application programs; 

storing, in second program storage, check programs each for detecting a 
change or changes in one of the appl i cat ion programs during the system operation; 
and 

detecting changes in the application programs by means of an inspection 
conducting means by sequential ly executing the stored check programs in response 
to an inspection conducting signal. 

According to a third aspect of the present invention, a safety test support 
program is provided for managing data concerning chemical safety tests on a I iving 
body to which a chemical has been given. The data include the condition of the 
body and/or the like. The support program comprises the steps of: 

storing appl i cat ion programs for the safety tests, which are functional ly 
partitioned according to data items and/or operations, in first program storage; 

activating, by means of an activating means, at least one program selected 
from the application programs; 

storing, in second program storage, check programs each for detecting a 
change or changes in one of the appl i cat ion programs during the system operation; 
and 

detecting changes in the application programs by means of an inspection 
conducting means by sequential ly executing the stored check programs in response 
to an inspection conducting signal. 

The appl i cat ion programs, which are functional ly partitioned according to 
data items and/or operations, are independent of each other. If part of the 
independent application programs are upgraded or updated, there is no need to 
i nspect the who I e system, but i t i s poss i b I e to i nspect on I y the upgraded or updated 
program/s by executing the associated check program/s. This greatly faci I itates 
the inspection and/or validation during the system operation, so that the 
inspection can be reliable. It is possible to automatically inspect and/or 
validate the whole system by sequentially and automatically executing the check 
programs for the application programs. This makes it possible to quickly and 
easi ly inspect and/or va I i date the whole system. Accordingly, for example, every 
time the support system is updated with a security patch applied to the operation 
system, it is possible to reliably carry out the auto-validation of the support 
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system. Because the inspection and/or validation of the whole system can be 
carried out quickly and easi ly, it is possible to safely operate the support system 
by i nspect i ng i t after quick I y updat i ng i t when i t i s supp I i ed w i th a secur i ty patch 
or the I ike. Thus, the support system is easi ly inspected and/or val i dated every 
time it is upgraded and/or updated, and it detects any changes due to the upgrading 
and/or updat i ng dur i ng the system operat i on. Consequent I y, the support system can 
re I iably comply with the GLP and other standards. Because the appl i cat ion programs, 
which are functional ly partitioned according to data items and/or operations, are 
independent of each other, there is no need to introduce less usable and needless 
appl i cat ions, so that the system instal I at ion and operation costs can be greatly 
reduced. 

If a change that does not affect the system operation is detected in one 
of the application programs during the system operation, the associated check 
program may ignore the change. If a change that affects the system operation is 
detected in one of the application programs during the system operation, the 
associated check program may regard the change as a change. In this case, the 
support system does not output a I I changes as N. G. signals as is the case with the 
conventional systems, but the check program ignores slight changes of fonts, 
display color and/or the like that do not at a I I affect the system operation 
complying with the GLP and other standards. This makes it possible to greatly 
reduce the visual reconfirmation of N. G. signals. 

The inspection conducting means may inspect the application programs by 
identifying the application program associated with each of the check programs, 
inputting a pseudo-signal directly to the identified application program, 
detecting a response signal responsive to the input pseudo-signal and comparing 
the detected response signal with a response signal detected before the inspection. 
By inputting the pseudo-signal directly to the appl i cat ion program, it is possible 
to detect a pure system change including no factor resulting from the input device 
and/or driver. Accordingly, even if the input device and/or driver is changed, 
the system operation and/or inspection is not affected, so that the support system 

is kept easy to use. 

If the pseudo-signal is input to the appl i cat ion program directly without 
pass i ng through the operat i on system of the support system, i t i s poss i b I e to detect 
a pure system change including no factor resulting not only from the input device 
and/or driver but also from the operation system. 
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If the pseudo-signal is input to the application program through the operation 
system, it is possible to detect the change in the support system, inclusive of 

the operation system. 

The safety test support system may further comprise a displaying means, a 
program selecting means, an activation confirming means and a user authenticating 
means. The displaying means displays a list of the application programs stored 
in the first program storage. The program selecting means selects one or more of 
the displayed appl i cat ion programs. The activating means activates the selected 
app I i cat i on program/s. The act i vat i on conf i rm i ng means conf i rms at predeterm i ned 
intervals whether the activated application program or any of the activated 
application programs is active. The user authenticating means requests at 
predetermined intervals that authentication information on the user of the support 
system be input while the activation confirming means is confirming whether the 
activated program or any of the activated programs is active. In this case, the 
user is authenticated when the support system is activated and thereafter at the 
predetermined intervals while the activated application program or any of the 
activated application programs is active. Consequently, even if another person 
makes an entry into the support system after the support system is activated, it 
i s essent i a I I y poss i b I e to determ i ne who has made the entry. Th i s makes i t poss i b I e 
to comply reliably with the GLP and other standards. 

The safety test support system may further comprise an authentication 
information holding means for holding validity information on the user 
authentication by the user authenticating means. When each of the selected 
application programs is activated, the execution of the activated program may be 
started if the user authentication is valid, and the execution of the activated 
program may not be started if the user authentication is invalid, on the-basis of 
the held val idity information. In this case,__if the user authentication is val id, 
no user authent i cat i on i s carr i ed out when each of the se I ected app I i cat i on programs 
is activated. This avoids double authentication, thereby making the support 
system easy to use. 

When one or more of the registered appl i cat ion programs are activated, it 
or they may confirm whether the user authenticating means is active. If the user 
authenticating means is inactive, it may be activated. In this case, the single 
authenticating means can manage the authentication of two or more application 
programs. Accord i ng I y. wh i I e part of the se I ected app I i cat i on programs are act i ve, 
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there is no need to authenticate the user when each of the other programs is 
act i vated. Consequent I y , the work i ng ef f i c i ency i s i mproved. Wh i I e one or more 
application programs not registered are executed, the user authenticating means 
is not activated. This prevents the memory capacity from being wasted. 
Consequently, the execution speed does not fall. 

The support system may be used for a chemical toxicity test on an animal 
as a I i v i ng body. Such a tox i c i ty test requ i res an enormous amount of var i ous data. 
For many such tests, different users of the support system need different types 
of data. In this case, only usable and necessary application programs may be 
introduced into the support system, so that the cost of the whole system can be 
greatly reduced. For such a test, because two or more observers may enter data 
into the support system by turns, the effect of confirming at regular intervals 
who has made an entry or entries into the system is remarkable. 



BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram of a safety test support system according to an 
embodiment of the present invention. 

Fig. 2 shows a d i sp I ay screen of the d i sp I ay i ng means of the support system. 

Fig. 3 shows the operation of the support system. 

Fig. 4 is a flowchart of the operation of the support system. 

Fig. 5 is another flowchart of the operation of the support system. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 



Embodiment 1 

Fig. 1 shows a safety test support system according to an embodiment of the 
present invention. The support system is a chemical test data management system, 
to which the invention is applied. The support system includes a data inputting 
means 1, an app I i cat ion executing means 2, an outputting means 3. a di splaying means 

4 and data storage 6. 

Data on an animal to which a chemical has been actual ly given can be entered 
into the data inputting means 1. The data include body weight, food consumption, 
water consumption, urinary output, biochemical test results, hematological test 
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results, clinical symptom observation results, pathological opinions (findings or 
observations), etc. The appl i cat ion executing means 2 receives the data from the 
inputting means 1 and executes various applications (application programs), which 
will be described later on, to accumulate and/or otherwise process the data. 

The outputting means 3 may be a printer, which outputs the data accumulated 
or otherwise processed by the application executing means 2 and/or other 
i nf ormat i on on sheets or the I i ke. The d i sp I ay i ng means 4 may be a d i sp I ay, wh i ch 
displays various sorts of information when data are entered into and output from 
the support system. The data storage 6 rece i ves the entered data from the execut i ng 
means 2 and stores them. 

The support system includes a memory unit 12 and an arithmetic unit 13. The 
memory unit 12 includes a hard disc and an MO. The arithmetic unit 13 includes 
a CPU and a memory. 

The means mentioned above carry out normal entry, accumulation, etc. of data. The 
data entered into the data inputting means 1 are stored through the application 
executing means 2 in the data storage 6. During the data entry, the entered data 
and necessary information are displayed on the displaying means 4. When the 
entered data are accumulated or otherwise processed, the accumulated or processed 
data are output from the outputting means 3, and the output data and necessary 
information are displayed on the displaying means 4. 

The support system also includes appl i cat ion storage 5, which functions as 
the first program storage of the present invention, for storing business 
appl i cat ions. The business appl i cat ions are functional ly partitioned according 
to data items and/or operations, which may be the entry and accumulation of body 
weight, the output of the accumulated data on body weight, and the entry, 
accumulation and output of pathological opinions. The business appl i cat ions can 
be stored in the appl i cat ion storage 5 at any time by a program introducing means 
29, which may be a CD-ROM drive. 

The support system further includes an application act i vat ing means 7, in 
wh i ch the bus i ness app I i cat i ons stored i n the app I i cat i on storage 5 are reg i stered. 
The activating means 7 activates one or more business applications selected out 
of the registered applications by the user. The storage locations in the 
application storage 5 where the business applications are stored are associated 
with the registration locations in the activating means 7 where the respective 
programs are registered. 
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A list of the business applications registered in the activating means 7 
can be displayed on the displaying means 4. The support system further includes 
an application selecting means 8. with which the user selects from the list one 
or more business applications that he or she wants to activate. 

The application selecting means 8 may be a mouse or another input device. 
As shown in Fig. 2, the displaying means 4 has a screen 16, on which a menu 14 can 
be displayed. The user can select out of the business appl i cat ions I isted in the 
menu 14 one or more programs that he or she wants to activate. Then, the user can 
cl ick the icon or icons 15 of the selected program/s, with the pointer (not shown) 
put on the icon. Only one business appl i cat ion may be activated. Alternatively, 
two or more business appl i cat ions may be activated and executed at the same time. 
On the bas i s of the re I ated i nf ormat i on ment i oned above, the app I i cat i on act i vat i ng 
means 7 activates the business appl i cat i on/s selected with the application 
selecting means 8. The application activation includes the steps of reading the 
business appl i cat i on/s from the appl i cat ion storage 5 into the memory, developing 
them and obta i n i ng execut i on author i ty from the operat i on system. The app I i cat i on 
executing means 2 executes the activated appl i cat i on/s. 

The support system further i nc I udes an act i vat i on conf i rm i ng means 9, wh i ch 
confirms at regular intervals (for example, of 5 minutes) whether the business 
appl i cat ion or appl i cat ions activated by the activating means 7 and being executed 
by the executing means 2 are kept active. The activation confirmation involves 
i nqu i r i ng of the operat i on system whether the app I i cat i on or app I i cat i ons are be i ng 
developed on the memory and executed. 

The support system further includes a user authenticating means 10, which 
requests the entry of authentication information on the user at regular intervals 
(for examp I e, of 30 m i nutes) wh i I e the act i vat i on conf i rm i ng means 9 i s conf i rm i ng 
whether the business application or applications are kept active. The support 
system further includes an authentication information inputting means 11, with 
which the user enters authentication information on him or her in response to the 
request by the authenticating means 10. The authentication time during which the 
entry of authentication information is requested is set at a period longer than 
the activation confirmation time during which it is confirmed whether the business 
application or applications are kept active. 

The entry request may i nvo I ve d i sp I ay i ng on the d i sp I ay i ng means 4 a password 
entry screen, which prompts the user to enter his or her password. The 
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authentication information inputting means 11 may be a keyboard or another device, 
with which the password can be entered on the password entry screen. 

When one or more of the business appl i cat ions registered in the activating 
means 7 are activated, it or they may confirm whether the authentication program, 
which is the user authenticating means 10, is activated. If the activation 
confirming means 9 is inactive, it may be activated by the active appl i cat ion/s. 
This enables the single authenticating means 10 to manage the authentication of 
two or more business applications. Accordingly, while part of the business 
appl i cat ions are active, there is no need for the user to enter his or her password 
or be otherwise authenticated when each of the other applications is activated. 
Consequently, the working efficiency is improved. While any of the business 
appl i cat ions not registered are executed, the activation conf i rmi ng means 9 is not 
activated. This prevents the memory capacity from being wasted. Consequently, 
the execution speed does not fall. 

The business application or applications being executed by the executing 
means 2 act i vate the authent i cat i on program, wh i ch is the user authent i cat i ng means 
10. The support system further includes an authentication information holding 
means 18, which holds the authentication information as to whether the 
authentication by the user authenticating means 10 is valid or invalid. The 
business application or applications communicate with the authentication program 
so that the support system can determine whether to keep executing the appl i cat ion 
itself or the applications themselves. In order for the authentication program 
itself not to be activated many times, it determines by itself whether it is 
terminated. 

The support system further includes a check program storage 17, which 
functions as the second program storage of the present invention. The program 
storage 17 stores check (inspection) programs, each of which is associated with 
one of the business applications so as to detect the changes in the associated 
appl i cat ion during the system operation. The support system further includes an 
inspection conducting means 19, which detects the changes in the business 
appl i cat ions by sequential ly executing the check programs in the program storage 
17 if an inspection conducting signal is input from the mouse and/or the keyboard. 
As shown in Fig. 3, each of the business applications 27 is associated with one 
of the check programs 28. I n the examp I e shown i n F i g. 3. the bus i ness app I i cat i ons 
27 are applications A. B and C ? and the check programs 28 are programs a, b and 
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c f which are associated with the applications A, B and C, respectively. 

The business applications 27 and check programs 28 can be introduced 
suitably from the program introducing means 29. For example, when a business 
application 27 is introduced as a supplement during the system operation, a check 
program 28 associated with it is introduced at the same time. Thus, the business 
applications 27 and check programs 28 are introduced and used always in pairs. 

Thus, the business applications 27, which are functionally partitioned 
according to the data items and/or operations, are independent of each other. Even 
if part of the business applications 27 are upgraded or updated, it is possible 
to inspect the upgraded or updated appl ication/s by executing only the associated 
check program/s 28 without inspecting the whole support system. This greatly 
reduces the time and labor required by the inspection and/or val idation during the 
system operation, thereby making the inspection reliable. By sequentially and 
automat i ca I I y execut i ng check programs 28, wh i ch are assoc i ated w i th the respect i ve 
applications 27, it is possible to automatical ly carry out the inspection and/or 
validation of the whole support system, thereby making it possible to quickly and 
easily carry out the inspection and/or validation of the whole support system. 
Accordingly, for example, every time the support system is updated with a security 
patch applied to the operation system, it is possible to reliably carry out the 
automatic inspection of the support system. 

As stated above, it is possible to quickly and easily carry out the 
inspection and/or validation of the whole support system. Accordingly, if a 
security patch or the I ike is suppl ied, the support system can be inspected after 
it i s qu i ck I y updated. Th i s makes i t poss i b I e to safe I y operate the support system. 
Thus, by carrying out the inspection and/or val idation of the support system every 
time the system is upgraded and/or updated, and by detecting any_change in the 
business appl ication/s due to the upgrading and/or updating during the system 
operation, it is possible to comply re I i ably with the GLP and other standards. As 
stated above, the business appl i cat ions 27 are functional ly partitioned according 
to the data items and/or operations. Accordingly, there is no need to introduce 
less usable and needless business applications 27. This makes it possible to 
greatly reduce the system installation and operation costs. 

As shown in Fig. 3, the inspection by the inspection conducting means 19 
includes the steps of identifying the business appl i cat ion 27 associated with each 
check program 28, i nputt i ng a pseudo-s i gna I d i rect I y for the i dent i f i ed app I i cat i on 
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27, detecting a response signal responsive to the input signal, and comparing the 
detected signal with that detected before the inspection. 

An ordinary actuating signal can be entered with the input device 21, which may 
be the mouse or the keyboard. The input device 21 generates a physical signal, 
which is then converted into a meaningful signal by the driver 22 for the input 
device 21. The meaningful signal is input to the business appl i cat ion 27 through 
the operation system 23. Normally, the check program 28 causes the inspection 
conducting means 19 to generate a pseudo-signal similar to the actuating signal 
input from the input device 21 and converted by the driver 22. The pseudo-signal 
is input to the business application 27 directly or through the operation system 
23. The check program 28 detects a response signal representing the response of 
the business application 27 to the input pseudo-signal. The check program 28 
compares the detected response signal with the response signal stored in an 
inspection result storage 20 before the inspection. If the two response signals 
differ from each other, the check program 28 causes an N. G. signal to be output. 
If the response signals are identical, the check program 28 ignores the response 
signal detected during the inspection and continues the inspection. 

Thus, by inputting the pseudo-signal directly to the business application 
27, it is possible to detect a pure system change including no factor resulting 
from the input device 21 and/or driver 22. Accordingly, even if the input device 
21 and/or driver 22 is changed, the system operation and/or inspection is not 
affected, so that the support system is kept easy to use. 

The pseudo-signal may be input directly to the business application 27 
without passing through the operation system 23. This makes it possible to detect 
a pure system change including no factor resulting not only from the input device 
21 and/or driver 22 but also from~the operation system 23; 

-Alternatively, the pseudo-signal may be input to the business application 
27 through the operation system 23. This makes it possible to detect the change 
in the support system, inclusive of the operation system 23. Accordingly, even 
if the support system is updated with a security patch applied to the operation 
system, it is possible to detect the system change with the updating taken into 
cons i derat i on, thereby mak i ng it poss i b I e to comp I y re I i ab I y w i th the GLP and other 
standards. Thus, after the operation system 23 i s frequent I y updated, the support 
system is inspected. This makes it possible to safely operate the support system. 

If the check program 28 detects a system change not affecting the system 
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operation, it ignores this change. If the check program 28 detects a system change 
affecting the system operation, it detects this change as a change. 

As stated above, the response signal represents the response of the business 
appl i cat ion 27 to the input pseudo-signal. The determination of whether there is 
a change or not (OK or N. G. ) in the response signal involves setting a reference 
range as the bas i s for determ i n i ng whether th i s s i gna I has changed from the prev i ous 
system state. If the response signal falls within the reference range, it is 
determined that the signal has not changed (OK). If the response signal exceeds 
the reference range, it is determined that the signal has changed (N. G. ). 

For example, the change in the response signal may be a slight change in 
font size or display color, which does not affect the system operation at all. If 
all such changes were detected as N. G. signals, the output of N. G. signals would 
be enormously frequent, and the N. G. signals would need to be processed visually 
and manual ly after all. Therefore, a I I system changes are not detected as N. G. 
signals as is the case with the conventional support system. Instead, the 
reference range is set, and the check program 28 ignores si ight changes of fonts, 
display color and/or the like within this range, which do not at all affect the 
system operation complying with the GLP and other standards. This makes it 
possible to greatly reduce the visual reconfirmation of N. G. signals. 

Fig. 4 is a flowchart showing the operation of the support system. In the 
flowchart, each step number follows "S". 

When the support system is instal led, an acceptance inspection is started. 
The acceptance inspection includes the steps of entering body weight, food 
consumption, water consumption, urinary output, pathological opinions and other 
data through the data inputting means 1, which is the input device 21, causing the 
application executing means 2 to accumulate or otherwise process the input data 
so as to confirm that accurate accumulation results can be obtained. The 
inspection also includes the step of causing the inspection conducting means 19 
to execute the check programs 28 so as to confirm whether they can normal ly operate. 

In the meantime, the inspection result storage 20 stores the data input and 
accumulated and the operation results during the acceptance inspection. At the 
same time, a reference range is set for each of the operation results. 

After the acceptance inspection, actual system operation is started. For 
normal business, the system operation is continued without the support system 
val i dated. 
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During normal system operation, the support system operates as follows. 

The first step 10 is to display the list of registered programs on the 
displaying means 4 (Fig. 2) by starting the launcher program, which is the 
application activating means 7. The next step 20 is to select one or more of the 
business applications by cl i eking the associated icon/s 15 in the menu 14 on the 
screen 16 of the displaying means 4. The next step 30 is to start activating the 
selected appl ication/s. Then, the application executing means 2 executes the 
activated application or applications, inputting body weight, food consumption, 
water consumption, urinary output, pathological observations and other data, 
accumulating the input data, outputting the accumulated data onto sheets, and 
carrying out other processing required for the appl ication/s. The next step 40 
i s to determ i ne whether to term i nate the I auncher program. I f the I auncher program 
should not be terminated, the routine returns to the step 10. If this program 
should be terminated, the routine ends. 

When the activation of the selected business appl ication/s is started at 
the step 30, the activation of the authentication program, which is the activation 
confirming means 9, is started at the step 50. The activation of the authentication 
program is fol lowed by the step 90 of confirming whether this program is already 
executed. If the authentication program is already executed, the activation of 
the authent i cat i on program i s term i nated so that doub I e act i vat i on can be prevented. 
If this program is not executed yet, the step 90 is followed by the step 100. 

The step 100 is to request the authentication information inputting means 
11 to input authentication information, which may be a password and user ID. The 
next step 110 is to determine whether the input information is valid. If the 
authentication information is valid, the step 110 is followed by the step 115 of 
i nf orm i ng the bus i ness app I i cat i on/s of the va I i d i ty and ho I d i ng i nf ormat i on about 
the validity in the authentication information holding means 18. If the accurate 
password is not entered, so that the authentication information is invalid, the 
step 110 is followed by the step 120 of informing the business appl ication/s of 
the invalidity and holding information about the invalidity in the holding means 
18. 

If the entered password is wrong, or if the entered authentication 
information is not accurate at the step 110, the authentication information 
inputting means 11 might be requested again to input authentication information. 
Even after a certain number of entry requests, the accurate password may not be 
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entered, so that the user may not be authenticated. In this case, the halting 
appl i cat ion or appl i cat ions might be instructed to forcedly terminate so that it 
or they could be terminated in response to the termination instruction. 

The next step 130 is to wait unti I an authentication time, which may be 30 
minutes, for the authentication of the user passes. If the authentication time 
has passed, the routine returns to the step 100, where the authentication 
information inputting means 11 is requested again to input authentication 
information. If the authentication time has not passed, the step 130 is fol lowed 
by the step 140 of determining whether a confirmation time for the confirmation 
of the execution of the business app I ication/s has passed. If the confirmation 
time has not passed, the routine returns to the step 130, where the foregoing 
operation is repeated after the authentication time passes again. If the 
conf i rmat i on t i me has passed, the step 1 40 i s f o I I owed by the step 1 50 of conf i rm i ng 
whether the business application or applications are already executed. If the 
business application or applications are already executed at the step 160, the 
routine returns to the step 130, where the foregoing operation is repeated after 
the authentication time passes again. If no business application is executed at 
the step 160, the authentication program is terminated. 

I n the meant i me, after the act i vat i on of the se I ected bus i ness app I i cat i on/s 
is started at the step 30, and then the activation of the authentication program 
i s started at the step 50, the rout i ne goes to the step 60. The step 60 i s to conf i rm, 
by communicating with the authentication program, whether the authentication 
information held by the holding means 18 is valid or invalid. 

If the authentication information held by the holding means 18 is va I id at 
the step 70, this step is fol lowed by the step 80 of executing the active business 
appl ication/s. If this information is invalid, the activation of the selected 
business appl ication/s ends. 

Thus, whi le the activated appl i cat ion or any of the activated appl i cat ions 
is active, the user is authenticated at regular intervals. This makes it 
essential ly possible to determine who makes an entry or entries into the support 
system. Consequently, the support system can comply reliably with the GLP and 
other standards. The business applications, which are functionally partitioned 
according to the data items and/or operations, are independent of each other. If 
part of the business applications are upgraded or updated, it is possible to 
validate only the upgraded or updated app I ication/s. This makes it possible to 
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comply re I i ably with the GLP and other standards by means of reliable validation 
dur i ng the system operat i on. There i s no need to i ntroduce I ess usab I e and need I ess 
applications, so that the cost of the whole system can be greatly reduced. 

When the support system is activated, the user is authenticated. 
Thereafter, another person may make an entry into the support system. Whi le any 
of the activated applications is active, the user is authenticated at regular 
i nterva Is. Th i s makes i t essent i a I I y poss i b I e to determ i ne who has made the entry. 
Consequently, the support system can comply reliably with the GLP and other 
standards. Once the authent i cat i on program authent i cates the user, i t carr i es out 
no user authentication when each business application is activated. This avoids 
double authentication, thereby making the support system easy to use. 

The single user authenticating means can manage the authentication of a 
number of applications. Accordingly, while part of the applications are active, 
there is no need to authenticate the user when each of the other appl i cat ions is 
activated. This improves the working efficiency. Whi le any of the appl i cat ions 
not registered are executed, the user authenticating means is not activated. This 
prevents the memory capac i ty from be i ng wasted. Consequent I y , the execut i on speed 
does not f a I I . 

The support system is suitable for a chemical toxicity test on an animal 
as a I i v i ng body. Such a tox i c i ty test requ i res an enormous amount of var i ous data. 
In many cases, different users of the support system need different types of data 
for the test. Accordingly, it is possible to introduce only usable and necessary 
programs into the support system, so that the cost of the whole system can be greatly 
reduced. In many cases, two or more observers enter data into the support system 
by turns for the test. Consequent I y, the effect of conf i rmi ng at regu I ar i nterva I s 
who enters data into the support system is remarkable. 

Fig. 5 is a flowchart showing the auto-val idation carried out in the support 
system. In the flowchart, each step number follows "S". 

The auto-validation may include the following steps: 

1. Design Qualification (DO): requirements specifications, functional 
specifications, performance specifications and maker selection criteria 
before the equipment is purchased, or when the purpose of use is changed 

2. Instal I at ion Qua I if i cation (10) : checks with invoices and the confirmation 
of hardware and software installation 

when the hardware or software is instal led, or after the support system is 



17 



upgraded or moved 

3. Operational Qualification (OQ) : important functions 
before each routine is used, or one or more times a year 

4. Performance Qualification (PQ) : the performance for each purpose of use, 
preventive maintenance, and the confirmation of the operating performance of the 
support system in operation 

before or whi le each routine operates, or everyday, or whi le the system is 

used 

The important val idation steps are not only the instal I at ion qua I if i cat ion 
(IQ) but also the qualification during the system operation (OQ and PQ). For 
examp I e, if the support system i s cooperat i ve w i th Exce I , it requ i res qua I i f i cat i on 
for a new version of Excel. Even if the support system is not cooperative with 
Internet Explorer, it requires qualification if Internet Explorer is updated. 
Such a system that is validated when it is changed cannot cope with the changes 
of which the user is not aware. A TOX launcher can periodical ly perform automatic 
validation. Specifically, the function of recording and/or programming a 
validation procedure and making a decision as a result is added. 

The first step 1 is to read the check programs 28 from the check program 
storage 17 in response to an inspection conducting signal input from the input 
device 21, which may be the mouse or the keyboard. The next step 2 is to start 
executing the first unit check program "a" out of the read programs 28 (Fig. 3). 
At the next step 3, the executed program "a" causes a pseudo signal to be input 
to the app I i cat i on A, wh i ch is assoc i ated w i th th i s program, and the response s i gna I 
output in response to the pseudo signal by this application to be detected. 

Subsequently, the detected response signal is compared with the inspection 
result stored in the inspection result storage 20. The comparison determines 
-whether there i s a change dur i ng the system operat i on. The determ i nat ion i nc I udes 
the step 4 of determining whether the response signal fa I Is within the reference 
range set during the first acceptance inspection. If the response signal fa I Is 
within this range, it is ignored as a change that does not affect the system 
operation. Then, the step 4 is fol lowed by the step 6 of executing the inspection. 
If the response signal exceeds the range, it is regarded as a change that affects 
the system operation. Then, the step 4 is followed by the step 5 of outputting 
a N. G. signal. The step 5 is followed by the step 6 of executing the inspection. 
The N. G. si gna I represents the app I i cat i on name, the p I ace and content of the change, 
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etc., which may be specified on the displaying means 4, which may be the display, 
or output by the outputting means 3, which may be a printer. 

The step 7 is to terminate the first unit check program "a". After the 
program termination, the present val idation and comparison results are output from 
the outputting means 3 and stored in the inspection result storage 20. The next 
step 8 is to determine whether a I I the unit programs (a, b and c in Fig. 3) have 
ended. If a I I the programs have not ended, the routine returns to the step 2, where 
the execution of the second unit program "b" is started. If a I I the programs have 
ended, the auto-validation is terminated. 

Thus, by automatically performing all the validation after the first 
va I i dat i on, i t i s poss i b I e to term i nate the va I i dat i on i n I ess then one n i ght, wh i ch 
has conventional ly taken two or three people three or more months. Accordingly, 
it is possible to comply reliably with the GLP and other standards by performing 
not only the periodic validation during the system operation but also frequent 
va I i dat i on at a t i me when the operat i on system or noncooperat i ve software i s updated. 
The d i I i gent va I i dat i on makes i t poss i b I e to use a genera I purpose computer, great I y 
reducing the system installation cost. 

The procedure of the val idation performed inevitably during the acceptance 
inspection is stored, and the val idation after the first val idation is performed. 
Accordingly, even if the support system is not uniformly packaged but customized 
for the buyer, the va I i dat i on necessary for the buyer can be performed automat i ca I I y 
after the first validation. 

The support system is suitable for a chemical toxicity test on an animal 
as a living body. Because such a toxicity test requires an enormous amount of 
var i ous data, i t i s requ i red that the system i nsta I I at i on cost be I ow, and the effect 
— of using a general purpose computer is remarkable. 

The application of the support system is not limited to chemical toxicity 
tests on animals. The support system might also be appl ied, with simi lar effects, 
to medicinal ity/pharmaco logical tests and/or general pharmacological tests prior 
to safety tests on animals, pharmacokinetic tests, clinical tests to which GCP 
(standards for the conduction of clinical tests of medicines or pharmaceuticals) 
is applied, and/or non-GLP tests. 

The chemicals are not I imited to medicines or pharmaceuticals, but include 
agricultural chemicals, food additives, ointments and/or other applications, 
and/or other chemical substances. 
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The process for activating one or more programs (steps 10 - 40) , the process 
for confirming the activation (steps 90- 160). the process for activating one or 
more business appl i cat ions (steps 50 - 80) and other processes have been described 
as a series of routines. Alternatively, these processes might be executed 
asynchronously in independent forms. 

The entry of authentication information is the entry of a password with the 
keyboard. A I ternat i ve I y, authent i cat i on i nf ormat i on m i ght be entered by means of 
a magnetic card, an IC card or another ID card, or a fingerprint, voiceprint or 
retina recognition system. 
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